ci2 starts bisection 2023-11-03 02:40:37.641585811 +0000 UTC m=+26969.508610542 bisecting cause commit starting from 4bbeaddf9a63bf847511e5bfd790fc2893819d00 building syzkaller on 69904c9f85fcfb289eb529599176d42bcb3609eb ensuring issue is reproducible on original commit 4bbeaddf9a63bf847511e5bfd790fc2893819d00 testing commit 4bbeaddf9a63bf847511e5bfd790fc2893819d00 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: eeea51c94e63d2658764d47f1b73a3ce4b512a03187ac1c951a61cdd831ff0a0 run #0: crashed: invalid opcode in bpf_dispatcher_xdp run #1: crashed: invalid opcode in bpf_dispatcher_xdp run #2: crashed: invalid opcode in bpf_dispatcher_xdp run #3: crashed: invalid opcode in bpf_dispatcher_xdp run #4: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp_func run #5: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #6: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #7: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #8: crashed: invalid opcode in bpf_dispatcher_xdp run #9: crashed: invalid opcode in bpf_dispatcher_xdp run #10: crashed: invalid opcode in bpf_dispatcher_xdp run #11: crashed: invalid opcode in bpf_dispatcher_xdp run #12: crashed: invalid opcode in bpf_dispatcher_xdp run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: invalid opcode in bpf_dispatcher_xdp, types: [UNKNOWN] check whether we can drop unnecessary instrumentation disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 4bbeaddf9a63bf847511e5bfd790fc2893819d00 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ec1cc8e760e472dd21a75765735ac69741a74200b3f9448a73bf5ad89f728d79 run #0: crashed: invalid opcode in bpf_dispatcher_xdp run #1: crashed: invalid opcode in bpf_dispatcher_xdp run #2: crashed: kernel panic: Fatal exception run #3: crashed: invalid opcode in bpf_dispatcher_xdp run #4: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #5: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #6: crashed: invalid opcode in bpf_dispatcher_xdp run #7: OK run #8: OK run #9: OK representative crash: invalid opcode in bpf_dispatcher_xdp, types: [UNKNOWN] the bug reproduces without the instrumentation disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN LOCKDEP], they are not needed kconfig minimization: base=5179 full=6485 leaves diff=250 split chunks (needed=false): <250> split chunk #0 of len 250 into 5 parts testing without sub-chunk 1/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 4bbeaddf9a63bf847511e5bfd790fc2893819d00 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a45a5928df3aa4d077b5f3d53e1028fea87f04600d6801bb877b6d44a33e5e5c run #0: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #1: crashed: BUG: unable to handle kernel paging request in corrupted run #2: crashed: PANIC: double fault in bpf_dispatcher_xdp run #3: crashed: invalid opcode in bpf_dispatcher_xdp run #4: crashed: general protection fault in bpf_dispatcher_xdp run #5: crashed: invalid opcode in bpf_dispatcher_xdp run #6: crashed: invalid opcode in bpf_dispatcher_xdp run #7: OK run #8: OK run #9: OK representative crash: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 4bbeaddf9a63bf847511e5bfd790fc2893819d00 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 88329c426fa872fa36cd29c7acaea74f1e33865ab41d74dcc4a15b6283274e8b run #0: crashed: invalid opcode in bpf_dispatcher_xdp run #1: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #2: crashed: BUG: unable to handle kernel paging request in corrupted run #3: crashed: invalid opcode in bpf_dispatcher_xdp run #4: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #5: crashed: invalid opcode in bpf_dispatcher_xdp run #6: crashed: invalid opcode in bpf_dispatcher_xdp run #7: crashed: invalid opcode in bpf_dispatcher_xdp run #8: crashed: invalid opcode in bpf_dispatcher_xdp run #9: crashed: invalid opcode in bpf_dispatcher_xdp representative crash: invalid opcode in bpf_dispatcher_xdp, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing commit 4bbeaddf9a63bf847511e5bfd790fc2893819d00 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d88032d49f9e478eb1ee35687150e5e3f59b11870102245a357f6842953bde1e run #0: crashed: invalid opcode in bpf_dispatcher_xdp run #1: crashed: invalid opcode in bpf_dispatcher_xdp run #2: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #3: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #4: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #5: crashed: invalid opcode in bpf_dispatcher_xdp run #6: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #7: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #8: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #9: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp representative crash: invalid opcode in bpf_dispatcher_xdp, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 4bbeaddf9a63bf847511e5bfd790fc2893819d00 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9e859a8d2aeeb031b109996392b88fd888dbec3c0d1aa835dc453ef18042b176 run #0: crashed: invalid opcode in bpf_dispatcher_xdp run #1: crashed: invalid opcode in bpf_dispatcher_xdp run #2: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #3: crashed: invalid opcode in bpf_dispatcher_xdp run #4: crashed: BUG: unable to handle kernel paging request in corrupted run #5: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #6: crashed: invalid opcode in bpf_dispatcher_xdp run #7: crashed: invalid opcode in bpf_dispatcher_xdp run #8: crashed: invalid opcode in bpf_dispatcher_xdp run #9: OK representative crash: invalid opcode in bpf_dispatcher_xdp, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 4bbeaddf9a63bf847511e5bfd790fc2893819d00 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 failed building 4bbeaddf9a63bf847511e5bfd790fc2893819d00: net/socket.c:1225: undefined reference to `wext_handle_ioctl' net/socket.c:3420: undefined reference to `compat_wext_handle_ioctl' net/core/net-procfs.c:329: undefined reference to `wext_proc_init' net/core/net-procfs.c:345: undefined reference to `wext_proc_exit' minimized to 50 configs; suspects: [HID_ZEROPLUS USB_NET_CDC_MBIM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_PURELIFI WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_SILABS WLAN_VENDOR_ZYDAS X86_X32_ABI ZEROPLUS_FF] disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed picked [v6.1.43 v6.1.42 v6.1.22 v6.1 v6.0 v5.19 v5.17 v5.15 v5.13 v5.11 v5.9 v5.6 v5.3 v5.0 v4.19] out of 67 release tags testing release v6.1.43 testing commit 52a953d0934b17a88f403b4135eb3cdf83d19f91 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ad6df520cc1cc585d9e3d8f73a3244b6c5a07b7bf1240d0878830f6917c4e133 run #0: crashed: invalid opcode in bpf_dispatcher_xdp run #1: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #2: crashed: invalid opcode in bpf_dispatcher_xdp run #3: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #4: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #5: crashed: invalid opcode in bpf_dispatcher_xdp run #6: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #7: crashed: PANIC: double fault in bpf_dispatcher_xdp run #8: crashed: invalid opcode in bpf_dispatcher_xdp run #9: crashed: invalid opcode in bpf_dispatcher_xdp representative crash: invalid opcode in bpf_dispatcher_xdp, types: [UNKNOWN] testing release v6.1.42 testing commit d2a6dc4eaf6d50ba32a9b39b4c6ec713a92072ab gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a3c37da2f71aec8cfd50ca8680fb8d8bac4483ad7748387637c97b478f50343c run #0: crashed: general protection fault in bpf_dispatcher_xdp run #1: crashed: invalid opcode in bpf_dispatcher_xdp run #2: crashed: invalid opcode in bpf_dispatcher_xdp run #3: crashed: kernel panic: Fatal exception run #4: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #5: crashed: PANIC: double fault in bpf_prog_ADDR run #6: crashed: invalid opcode in bpf_dispatcher_xdp run #7: crashed: invalid opcode in bpf_dispatcher_xdp run #8: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #9: crashed: invalid opcode in bpf_dispatcher_xdp representative crash: general protection fault in bpf_dispatcher_xdp, types: [UNKNOWN] testing release v6.1.22 testing commit 3b29299e5f604550faf3eff811d6cd60b4c6cae6 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 36806a314f919c7359ba9214411481bae6af7fefca50786c8d54dc41d6f53fe8 run #0: crashed: general protection fault in bpf_dispatcher_xdp run #1: crashed: PANIC: double fault in bpf_prog_ADDR run #2: crashed: PANIC: double fault in bpf_dispatcher_xdp run #3: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #4: crashed: invalid opcode in bpf_dispatcher_xdp run #5: crashed: invalid opcode in bpf_dispatcher_xdp run #6: crashed: invalid opcode in bpf_dispatcher_xdp run #7: crashed: invalid opcode in bpf_dispatcher_xdp run #8: crashed: invalid opcode in bpf_dispatcher_xdp run #9: crashed: invalid opcode in bpf_dispatcher_xdp representative crash: general protection fault in bpf_dispatcher_xdp, types: [UNKNOWN] testing release v6.1 testing commit 830b3c68c1fb1e9176028d02ef86f3cf76aa2476 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 819221720f87626e6fb4c067df47be1d08b2640a61108488306181f4dcd265a3 run #0: crashed: invalid opcode in bpf_dispatcher_xdp run #1: crashed: general protection fault in bpf_dispatcher_xdp run #2: crashed: invalid opcode in bpf_dispatcher_xdp run #3: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #4: crashed: invalid opcode in bpf_dispatcher_xdp run #5: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #6: crashed: invalid opcode in bpf_dispatcher_xdp run #7: crashed: PANIC: double fault in bpf_dispatcher_xdp run #8: crashed: invalid opcode in bpf_dispatcher_xdp run #9: crashed: BUG: unable to handle kernel paging request in corrupted representative crash: invalid opcode in bpf_dispatcher_xdp, types: [UNKNOWN] testing release v6.0 testing commit 4fe89d07dcc2804c8b562f6c7896a45643d34b2f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 97818935fff184dcf611a768dfc9361d606ee4fd9d1e43c6ec9aec126c934d43 all runs: OK false negative chance: 0.000 # git bisect start 830b3c68c1fb1e9176028d02ef86f3cf76aa2476 4fe89d07dcc2804c8b562f6c7896a45643d34b2f Bisecting: 7514 revisions left to test after this (roughly 13 steps) [33e591dee915832c618cf68bb1058c8e7d296128] Merge tag 'phy-for-6.1' of git://git.kernel.org/pub/scm/linux/kernel/git/phy/linux-phy testing commit 33e591dee915832c618cf68bb1058c8e7d296128 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7c3d3c05fbc916e2887cfb0da1db32a4b16fbee669ff22888e5938d774d303a5 all runs: OK false negative chance: 0.000 # git bisect good 33e591dee915832c618cf68bb1058c8e7d296128 Bisecting: 3770 revisions left to test after this (roughly 12 steps) [de492c83cae0af72de370b9404aacda93dafcad5] prandom: remove unused functions testing commit de492c83cae0af72de370b9404aacda93dafcad5 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7fc0ba54a768db90c3a9388b23bf3e5f203352b1a22bbc470d641ca0c910bf4d all runs: OK false negative chance: 0.000 # git bisect good de492c83cae0af72de370b9404aacda93dafcad5 Bisecting: 1895 revisions left to test after this (roughly 11 steps) [c4d25ce6e9de47f6d9fb6cc1a34b47ce5f0a46ab] Merge tag 'usb-6.1-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb testing commit c4d25ce6e9de47f6d9fb6cc1a34b47ce5f0a46ab gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d1ae6914243ba471927a896f9492020400b174a97269a94e1799d8fe52633963 run #0: crashed: invalid opcode in bpf_dispatcher_xdp run #1: crashed: invalid opcode in bpf_dispatcher_xdp run #2: crashed: PANIC: double fault in bpf_dispatcher_xdp run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in bpf_dispatcher_xdp run #4: crashed: invalid opcode in bpf_dispatcher_xdp run #5: crashed: invalid opcode in bpf_dispatcher_xdp run #6: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #7: crashed: invalid opcode in bpf_dispatcher_xdp run #8: crashed: invalid opcode in bpf_dispatcher_xdp run #9: crashed: invalid opcode in bpf_dispatcher_xdp representative crash: invalid opcode in bpf_dispatcher_xdp, types: [UNKNOWN] # git bisect bad c4d25ce6e9de47f6d9fb6cc1a34b47ce5f0a46ab Bisecting: 926 revisions left to test after this (roughly 10 steps) [8636df94ec917019c4cb744ba0a1f94cf9057790] Merge tag 'perf-tools-for-v6.1-2-2022-10-16' of git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux testing commit 8636df94ec917019c4cb744ba0a1f94cf9057790 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6fdc26862427daf5c9df172d91b1bec3b2e1e38e06a2ae2d5460721bc2108358 all runs: OK false negative chance: 0.000 # git bisect good 8636df94ec917019c4cb744ba0a1f94cf9057790 Bisecting: 468 revisions left to test after this (roughly 9 steps) [ca4582c286aa4465f9d1a72bef34b04ee907d42e] Revert "mfd: syscon: Remove repetition of the regmap_get_val_endian()" testing commit ca4582c286aa4465f9d1a72bef34b04ee907d42e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4a1a8b09d3e8c208360559fb652acc057d83b095cfa8381408c5cf7901080f41 all runs: OK false negative chance: 0.000 # git bisect good ca4582c286aa4465f9d1a72bef34b04ee907d42e Bisecting: 214 revisions left to test after this (roughly 8 steps) [e3493d682516e2b7ef69587ddf91b0371a1511d0] Merge tag 'drm-fixes-2022-10-28' of git://anongit.freedesktop.org/drm/drm testing commit e3493d682516e2b7ef69587ddf91b0371a1511d0 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 24be59989581d4e45eede5d5da8cceb3075f8f5863e53588b3d6d4f49c25637e run #0: crashed: general protection fault in bpf_dispatcher_xdp run #1: crashed: invalid opcode in bpf_dispatcher_xdp run #2: crashed: general protection fault in bpf_dispatcher_xdp run #3: crashed: PANIC: double fault in bpf_dispatcher_xdp run #4: crashed: invalid opcode in bpf_dispatcher_xdp run #5: crashed: invalid opcode in bpf_dispatcher_xdp run #6: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #7: crashed: BUG: unable to handle kernel paging request in bpf_test_run run #8: crashed: invalid opcode in bpf_dispatcher_xdp run #9: crashed: invalid opcode in bpf_dispatcher_xdp representative crash: general protection fault in bpf_dispatcher_xdp, types: [UNKNOWN] # git bisect bad e3493d682516e2b7ef69587ddf91b0371a1511d0 Bisecting: 126 revisions left to test after this (roughly 7 steps) [888be6b279b7257b5f6e4c9527675bff0a335596] net/mlx5e: Do not increment ESN when updating IPsec ESN state testing commit 888be6b279b7257b5f6e4c9527675bff0a335596 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e0ecbdf4c49fe03f066d5539abb4cbc72d5d9bf884f457b9fd9d2c853972b1ca run #0: crashed: invalid opcode in bpf_dispatcher_xdp run #1: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #2: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #3: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #4: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #5: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #6: crashed: invalid opcode in bpf_dispatcher_xdp run #7: crashed: invalid opcode in bpf_dispatcher_xdp run #8: crashed: invalid opcode in bpf_dispatcher_xdp run #9: crashed: BUG: unable to handle kernel paging request in bpf_prog_test_run_xdp representative crash: invalid opcode in bpf_dispatcher_xdp, types: [UNKNOWN] # git bisect bad 888be6b279b7257b5f6e4c9527675bff0a335596 Bisecting: 47 revisions left to test after this (roughly 6 steps) [337a0a0b63f1c30195733eaacf39e4310a592a68] Merge tag 'net-6.1-rc3-1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit 337a0a0b63f1c30195733eaacf39e4310a592a68 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9ba2538b6d69627d110d4f056ea483c1111c680c4b108c1253f0049710d56f4f run #0: crashed: invalid opcode in bpf_dispatcher_xdp run #1: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #2: crashed: invalid opcode in bpf_dispatcher_xdp run #3: crashed: invalid opcode in bpf_dispatcher_xdp run #4: crashed: invalid opcode in bpf_dispatcher_xdp run #5: crashed: invalid opcode in bpf_dispatcher_xdp run #6: crashed: invalid opcode in bpf_dispatcher_xdp run #7: crashed: invalid opcode in bpf_dispatcher_xdp run #8: crashed: invalid opcode in bpf_dispatcher_xdp run #9: crashed: invalid opcode in bpf_dispatcher_xdp representative crash: invalid opcode in bpf_dispatcher_xdp, types: [UNKNOWN] # git bisect bad 337a0a0b63f1c30195733eaacf39e4310a592a68 Bisecting: 36 revisions left to test after this (roughly 5 steps) [e28c44450b14474009a7ac84eb2bd631357c9635] Merge tag 'for-netdev' of https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf testing commit e28c44450b14474009a7ac84eb2bd631357c9635 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: af20f8e0fdc4b8494e14504169a5ef0afcefa727742ba81e3495bc31a1f97cef run #0: crashed: invalid opcode in bpf_dispatcher_xdp run #1: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #2: crashed: invalid opcode in bpf_dispatcher_xdp run #3: crashed: invalid opcode in bpf_dispatcher_xdp run #4: crashed: invalid opcode in bpf_dispatcher_xdp run #5: crashed: general protection fault in bpf_dispatcher_xdp run #6: crashed: invalid opcode in bpf_dispatcher_xdp run #7: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #8: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #9: OK representative crash: invalid opcode in bpf_dispatcher_xdp, types: [UNKNOWN] # git bisect bad e28c44450b14474009a7ac84eb2bd631357c9635 Bisecting: 20 revisions left to test after this (roughly 4 steps) [0a09f01f11e7c5493ec87a1f9c8824c3fc010751] Merge branch 'amd-xgbe-miscellaneous-fixes' testing commit 0a09f01f11e7c5493ec87a1f9c8824c3fc010751 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 416936c82b34c97e5decf47a5a664817f0268621aad056f56125e6306eccbf6b all runs: OK false negative chance: 0.000 # git bisect good 0a09f01f11e7c5493ec87a1f9c8824c3fc010751 Bisecting: 10 revisions left to test after this (roughly 3 steps) [9c1eaa27ec599fcc25ed4970c0b73c247d147a2b] net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY testing commit 9c1eaa27ec599fcc25ed4970c0b73c247d147a2b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ab463beb87b8bde13a19eb55edd7ba14b3fcf9edb17746b3e50f845191ad4558 all runs: OK false negative chance: 0.000 # git bisect good 9c1eaa27ec599fcc25ed4970c0b73c247d147a2b Bisecting: 5 revisions left to test after this (roughly 3 steps) [ea68376c8bed5cd156900852aada20c3a0874d17] bpf: prevent decl_tag from being referenced in func_proto testing commit ea68376c8bed5cd156900852aada20c3a0874d17 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 03cea9069825d0b58f5909ed9266ca003d5a96e0332a90f74c4bcfc8cfa07baf all runs: OK false negative chance: 0.000 # git bisect good ea68376c8bed5cd156900852aada20c3a0874d17 Bisecting: 2 revisions left to test after this (roughly 2 steps) [fa4447cb73b2bfe7175f1b7ffdc70580fcfcb991] bpf: Use __llist_del_all() whenever possbile during memory draining testing commit fa4447cb73b2bfe7175f1b7ffdc70580fcfcb991 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9ab2a52d7eea88fe6c142c81e01f8bbf31e9e44408a90fd28f799fb70b23b27a run #0: crashed: PANIC: double fault in bpf_dispatcher_xdp run #1: crashed: invalid opcode in bpf_dispatcher_xdp run #2: crashed: invalid opcode in bpf_dispatcher_xdp run #3: crashed: invalid opcode in bpf_dispatcher_xdp run #4: crashed: invalid opcode in bpf_dispatcher_xdp run #5: crashed: invalid opcode in bpf_dispatcher_xdp run #6: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #7: crashed: invalid opcode in bpf_dispatcher_xdp run #8: crashed: invalid opcode in bpf_dispatcher_xdp run #9: crashed: invalid opcode in bpf_dispatcher_xdp representative crash: PANIC: double fault in bpf_dispatcher_xdp, types: [UNKNOWN] # git bisect bad fa4447cb73b2bfe7175f1b7ffdc70580fcfcb991 Bisecting: 0 revisions left to test after this (roughly 1 step) [3d05818707bb2cf133ccdcd29f2d5585b5bc1298] bpf: Wait for busy refill_work when destroying bpf memory allocator testing commit 3d05818707bb2cf133ccdcd29f2d5585b5bc1298 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 84bd383dd23a0e69f3d595b76c6dc8aaa12ca8c6436403d37d1686adebf5066b run #0: crashed: invalid opcode in bpf_dispatcher_xdp run #1: crashed: invalid opcode in bpf_dispatcher_xdp run #2: crashed: invalid opcode in bpf_dispatcher_xdp run #3: crashed: invalid opcode in bpf_dispatcher_xdp run #4: crashed: general protection fault in bpf_dispatcher_xdp run #5: crashed: invalid opcode in bpf_dispatcher_xdp run #6: crashed: invalid opcode in bpf_dispatcher_xdp run #7: crashed: general protection fault in bpf_dispatcher_xdp run #8: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #9: OK representative crash: invalid opcode in bpf_dispatcher_xdp, types: [UNKNOWN] # git bisect bad 3d05818707bb2cf133ccdcd29f2d5585b5bc1298 Bisecting: 0 revisions left to test after this (roughly 0 steps) [dbe69b29988465b011f198f2797b1c2b6980b50e] bpf: Fix dispatcher patchable function entry to 5 bytes nop testing commit dbe69b29988465b011f198f2797b1c2b6980b50e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ec5645ff43c57ec4e5339da2314363ab49d9f956810ac3281a2117d38b94034b run #0: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #1: crashed: invalid opcode in bpf_dispatcher_xdp run #2: crashed: invalid opcode in bpf_dispatcher_xdp run #3: crashed: invalid opcode in bpf_dispatcher_xdp run #4: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #5: crashed: general protection fault in bpf_dispatcher_xdp run #6: crashed: invalid opcode in bpf_dispatcher_xdp run #7: crashed: invalid opcode in bpf_dispatcher_xdp run #8: crashed: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp run #9: crashed: invalid opcode in bpf_dispatcher_xdp representative crash: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp, types: [UNKNOWN] # git bisect bad dbe69b29988465b011f198f2797b1c2b6980b50e dbe69b29988465b011f198f2797b1c2b6980b50e is the first bad commit commit dbe69b29988465b011f198f2797b1c2b6980b50e Author: Jiri Olsa Date: Tue Oct 18 09:59:34 2022 +0200 bpf: Fix dispatcher patchable function entry to 5 bytes nop The patchable_function_entry(5) might output 5 single nop instructions (depends on toolchain), which will clash with bpf_arch_text_poke check for 5 bytes nop instruction. Adding early init call for dispatcher that checks and change the patchable entry into expected 5 nop instruction if needed. There's no need to take text_mutex, because we are using it in early init call which is called at pre-smp time. Fixes: ceea991a019c ("bpf: Move bpf_dispatcher function out of ftrace locations") Signed-off-by: Jiri Olsa Acked-by: Peter Zijlstra (Intel) Link: https://lore.kernel.org/r/20221018075934.574415-1-jolsa@kernel.org Signed-off-by: Alexei Starovoitov arch/x86/net/bpf_jit_comp.c | 13 +++++++++++++ include/linux/bpf.h | 14 +++++++++++++- kernel/bpf/dispatcher.c | 6 ++++++ 3 files changed, 32 insertions(+), 1 deletion(-) accumulated error probability: 0.00 culprit signature: ec5645ff43c57ec4e5339da2314363ab49d9f956810ac3281a2117d38b94034b parent signature: 03cea9069825d0b58f5909ed9266ca003d5a96e0332a90f74c4bcfc8cfa07baf revisions tested: 26, total time: 6h17m8.084590222s (build: 1h46m11.835921271s, test: 4h20m37.310193429s) first bad commit: dbe69b29988465b011f198f2797b1c2b6980b50e bpf: Fix dispatcher patchable function entry to 5 bytes nop recipients (to): ["ast@kernel.org" "jolsa@kernel.org" "peterz@infradead.org"] recipients (cc): [] crash: BUG: unable to handle kernel paging request in bpf_dispatcher_xdp BUG: unable to handle page fault for address: ffffc8ffc7248117 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 0 P4D 0 Oops: 0002 [#1] PREEMPT SMP CPU: 0 PID: 655 Comm: syz-executor.2 Not tainted 6.0.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 RIP: 0010:bpf_dispatcher_xdp+0x820/0x1000 Code: 00 00 00 00 00 00 00 00 00 00 48 81 fa 9c 20 00 a0 7f 47 48 81 fa e4 1f 00 a0 7f 2e 48 81 fa 50 09 00 a0 7f 15 48 81 fa 50 09 <00> a0 0f 84 e8 c5 ff ff ff e2 66 0f 1f 44 00 00 48 81 fa e4 1f 00 RSP: 0018:ffffc900013bfc98 EFLAGS: 00010216 RAX: ffffc900013bfd08 RBX: 0000000000000001 RCX: 00000000fffffffc RDX: ffffffffa0002290 RSI: ffffc900013b1048 RDI: ffffc900013bfda8 RBP: ffffc900013bfd50 R08: ffffc900013bfde0 R09: 0000000000745d1e R10: ffff888115a8ec00 R11: 0000000000015000 R12: 0000000000000000 R13: 0000000007000000 R14: ffffc900013b1000 R15: ffffc900013b1048 FS: 00007f5f52da56c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc8ffc7248117 CR3: 0000000115b19000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: bpf_prog_test_run_xdp+0x28e/0x4b0 net/bpf/test_run.c:1391 bpf_prog_test_run+0xdf/0x100 kernel/bpf/syscall.c:3630 __sys_bpf+0x2a7/0x490 kernel/bpf/syscall.c:4983 __do_sys_bpf kernel/bpf/syscall.c:5069 [inline] __se_sys_bpf kernel/bpf/syscall.c:5067 [inline] __x64_sys_bpf+0x17/0x20 kernel/bpf/syscall.c:5067 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5f5207cae9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5f52da50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 RAX: ffffffffffffffda RBX: 00007f5f5219bf80 RCX: 00007f5f5207cae9 RDX: 0000000000000048 RSI: 0000000020001480 RDI: 000000000000000a RBP: 00007f5f520c847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f5f5219bf80 R15: 00007ffe0ed0aa68 Modules linked in: CR2: ffffc8ffc7248117 ---[ end trace 0000000000000000 ]--- RIP: 0010:bpf_dispatcher_xdp+0x820/0x1000 Code: 00 00 00 00 00 00 00 00 00 00 48 81 fa 9c 20 00 a0 7f 47 48 81 fa e4 1f 00 a0 7f 2e 48 81 fa 50 09 00 a0 7f 15 48 81 fa 50 09 <00> a0 0f 84 e8 c5 ff ff ff e2 66 0f 1f 44 00 00 48 81 fa e4 1f 00 RSP: 0018:ffffc900013bfc98 EFLAGS: 00010216 RAX: ffffc900013bfd08 RBX: 0000000000000001 RCX: 00000000fffffffc RDX: ffffffffa0002290 RSI: ffffc900013b1048 RDI: ffffc900013bfda8 RBP: ffffc900013bfd50 R08: ffffc900013bfde0 R09: 0000000000745d1e R10: ffff888115a8ec00 R11: 0000000000015000 R12: 0000000000000000 R13: 0000000007000000 R14: ffffc900013b1000 R15: ffffc900013b1048 FS: 00007f5f52da56c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc8ffc7248117 CR3: 0000000115b19000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400